New malware exploits trusted Windows drivers to get around security systems - here's how to stay safe

Proactive Cybersecurity Service That Neutralizes Threats Within a Digital Network - Conceptual Illustration.

• Chinese threat group abused a vulnerable WatchDog Antimalware driver to disable antivirus and EDR tools
• Attackers also leveraged a Zemana Anti-Malware driver (ZAM.exe) for broader compatibility across Windows
• Researchers are urging IT teams to update blocklists, use YARA rules, and monitor for suspicious activity

Chinese hackers Silver Fox have been seen abusing a previously trusted Windows driver to disable antivirus protections and deploy malware on target devices.